last_rollout_failed_at should be set for failures namespaces also

Summary

We are setting last_rollout_failed_at only for the namespaces that are failing at the time of provisioning. The namespaces, which can not go through the ProvisioningService step, are never marked as failed, and they will always come in the rollout batch. Currently, the batch_size is set to 1, which means the same namespace will be tried again and again.

Steps to reproduce

What is the current bug behavior?

What is the expected correct behavior?

Relevant logs and/or screenshots

Possible fixes

We should also set last_rollout_failed_at for the namespaces that are decided by PlanningService right away that they can not be rolledout.